Sophisticated, Highly-Targeted Attacks Continue to Plague npm

13 points · 7 comments · view on lemmy.world

7 Comments

mo_ztt@lemmy.world · 9 pts · 3y (5 replies)

Article? It's just the image

expertmadman@sh.itjust.works · 7 pts · 3y (4 replies)
mo_ztt@lemmy.world · 4 pts · 3y (3 replies)

All good, you can still go back and edit it to fix it.

sugar_in_your_tea@sh.itjust.works · 4 pts · 3y (2 replies)

Yup, this isn't Reddit.

mo_ztt@lemmy.world · 2 pts · 3y (1 reply)

Yeah sure, you can edit post titles, but you have to remember that we don't yet have an unusable chat or a very limited selection of mascot-themed avatars. CHRIST WHAT WERE WE THINKING

mo_ztt@lemmy.world · 2 pts · 3y

Also, why hasn't he updated the story yet, and why are people upvoting the nonexistent story... I am being 100% sincere when I say that seeing a community of people upvote a story, when the actual link to the story is broken so you can't read it, makes me rethink what type of people make up that community and whether I want to be a part of it.

IDK, maybe it's some federation thing where he updated the story a while ago and the change just doesn't propagate properly or quickly or something.

Edit: Nope, not a federation thing, as of T plus 9 hours. What are y'all upvoting?

expertmadman@sh.itjust.works · 5 pts · 3y

https://blog.phylum.io/sophisticated-highly-targeted-attacks-continue-to-plague-npm/

tl;dr several packages were recently published to npm that appear to be subtle command and control. Behaviors of the infrastructure seem to mimic those recently identified by Phylum as being nation state activity from North Korea.